CVE-2023-28368
Last modified
CVE-2023-28368 is a medium-severity vulnerability rated 5.7/10 on the CVSS scale. TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained.. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | T2600g-28sq Firmware | 20190530 |
| Tp-Link | T2600g-28sq Firmware | 20200304 |
References
- https://jvn.jp/en/jp/JVN62420378/Third Party Advisory
- https://jvn.jp/en/jp/JVN62420378/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-28368?
How severe is CVE-2023-28368?
How do I fix CVE-2023-28368?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-28361A Cross-site WebSocket Hijacking (CSWSH) vulnerability found…6.5
- CVE-2023-28362The redirect_to method in Rails allows provided values to co…4
- CVE-2023-28364An Open Redirect vulnerability exists prior to version 1.52.…6.1
- CVE-2023-28365A backup file vulnerability found in UniFi applications (Ver…9.1
- CVE-2023-28366The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0…7.5
- CVE-2023-28367Cross-site scripting vulnerability in CTA post function of V…5.4
- CVE-2023-28369Brother iPrint&Scan V6.11.2 and earlier contains an improper…3.3
- CVE-2023-2837Stack-based Buffer Overflow in GitHub repository gpac/gpac p…5.5
- CVE-2023-28370Open redirect vulnerability in Tornado versions 6.3.1 and ea…6.1
- CVE-2023-28371In Stellarium through 1.2, attackers can write to files that…9.8
- CVE-2023-28372A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereb…2.7
- CVE-2023-28373A flaw exists in FlashArray Purity whereby an array administ…2.7
Are you affected by CVE-2023-28368?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST